Cyberspace coordinate system creation method and apparatus based on autonomous system

Abstract

A cyberspace coordinate system creation method and apparatus based on an autonomous system is provided. The method includes: determining a cyberspace coordinate system; constructing a framework for a three-dimensional cyberspace coordinate system; constructing a cyberspace map model based on the cyberspace coordinate system and the framework for the three-dimensional cyberspace coordinate system; and designing an application scenario corresponding to a constructed cyberspace map model, and performing visualization processing on the application scenario. The method may realize the visualization of multi-dimensional information of cyberspace based on a unified and constant backboard, e.g., an Autonomous System (AS) topology, an Internet Protocol (IP) address composition, network resource element information, a hierarchical structure, and the like, and is suitable for visualization of a number of security attacks on the cyberspace and network management scenarios.

What is claimed is: 
     
       1. A cyberspace coordinate system creation method based on an Autonomous System (AS), comprising:
 determining a two-dimensional cyberspace coordinate system, by mapping, based on a predetermined algorithm, a one-dimensional AS Number (ASN) to a two-dimensional coordinate space; 
 constructing a framework for a three-dimensional cyberspace coordinate system, by orthogonalizing a time sequence of Internet Protocol (IP) address allocation under the AS determined as a third-dimension basic vector to a two-dimensional AS coordinate space, and analyzing and mapping an IP address of a key attribute of cyberspace; 
 constructing a cyberspace map model based on the cyberspace coordinate system and the framework for the three-dimensional cyberspace coordinate system; and 
 designing an application scenario corresponding to a constructed cyberspace map model, and visualizing the application scenario based on the constructed cyberspace map model, 
 wherein the framework for the three-dimensional cyberspace coordinate system is a three-dimensional coordinate system that comprises a third-dimension coordinate axis perpendicular to a basic vector of a two-dimensional AS; 
 said orthogonalizing the time sequence of the IP address allocation under the AS determined as the third-dimension basic vector to the two-dimensional AS coordinate space comprises: 
 representing the time sequence of the IP address allocation under the AS by a third coordinate axis perpendicular to the two-dimensional coordinate system, a positive direction representing sequence increment; and 
 said analyzing and mapping the IP address of the key attribute of cyberspace comprises: 
 modeling the cyberspace by defining a three-dimensional coordinate system space, and locating any cyberspace resource element based on an IP address of a key identifier of communication, wherein a Z-axis mapping algorithm is described as sorting, based on allocation time, all IP addresses under a certain AS in ascending order, and sorting IP addresses under the same allocation time from small to large in decimal, and serial numbers of the sorted IP addresses are mapped to a third-dimension coordinate system; and 
 analyzing and mapping the IP address by locating a coordinate based on a Hilbert algorithm and the Z-axis mapping algorithm. 
 
     
     
       2. The method according to  claim 1 , wherein
 the predetermined algorithm is a Hilbert mapping algorithm, and said mapping, based on the predetermined algorithm, the one-dimensional ASN to the two-dimensional coordinate space comprises: 
 performing dimension ascending mapping on the ASN by using the Hilbert mapping algorithm, and determining that two-dimensional coordinates of the two-dimensional cyberspace coordinate system collectively represent an AS attribute of cyberspace. 
 
     
     
       3. The method according to  claim 1 , wherein said constructing the cyberspace map model based on the cyberspace coordinate system and the framework for the three-dimensional cyberspace coordinate system comprises:
 determining that a hierarchical structure of a cyberspace is divided into three layers: the AS, a network, and an IP; and 
 defining a sphere mode of cyberspace, wherein the AS is mapped to another three-dimensional space by adopting a force-directed algorithm and taking the AS as a node in the force-directed algorithm, the AS being denoted as a sphere in the other three-dimensional space, and the sphere having a size positively correlated to a number of IP addresses under the AS. 
 
     
     
       4. The method according to  claim 1 , wherein said designing the application scenarios corresponding to the constructed cyberspace map model, and visualizing the application scenario comprises:
 calculating, based on a mapping algorithm, coordinates of an attack source and a destination IP address in a three-dimensional cyberspace coordinate system based on the AS to visualize a real-time attack scenario, wherein a flying line represents an attack direction from an attacker to a victim, and a line thickness represents and is positively correlated to attack traffic; and 
 calculating, based on the mapping algorithm, the coordinates of the attack source and the destination IP address in the three-dimensional cyberspace coordinate system based on the AS, wherein the line thickness represents and is positively correlated to an attack frequency. 
 
     
     
       5. A cyberspace coordinate system creation apparatus based on an Autonomous System (AS), comprising a memory and a processor, the memory having a computer program stored therein, and the processor being configured to execute the computer program to perform a method, comprising:
 determining a two-dimensional cyberspace coordinate system, by mapping, based on a predetermined algorithm, a one-dimensional AS Number (ASN) to a two-dimensional coordinate space; 
 constructing a framework for a three-dimensional cyberspace coordinate system, by orthogonalizing a time sequence of Internet Protocol (IP) address allocation under the AS determined as a third-dimension basic vector to a two-dimensional AS coordinate space, and analyzing and mapping an IP address of a key attribute of cyberspace; 
 constructing a cyberspace map model based on the cyberspace coordinate system and the framework for the three-dimensional cyberspace coordinate system; and 
 designing an application scenario corresponding to a constructed cyberspace map model, and visualizing the application scenario based on the constructed cyberspace map model, 
 wherein the framework for the three-dimensional cyberspace coordinate system is a three-dimensional coordinate system that comprises a third-dimension coordinate axis perpendicular to a basic vector of a two-dimensional AS; 
 said orthogonalizing the time sequence of the IP address allocation under the AS determined as the third-dimension basic vector to the two-dimensional AS coordinate space comprises: 
 representing the time sequence of the IP address allocation under the AS by a third coordinate axis perpendicular to the two-dimensional coordinate system, a positive direction representing sequence increment; and 
 said analyzing and mapping the IP address of the key attribute of cyberspace comprises: 
 modeling the cyberspace by defining a three-dimensional coordinate system space, and locating any cyberspace resource element based on an IP address of a key identifier of communication, wherein a Z-axis mapping algorithm is described as sorting, based on allocation time, all IP addresses under a certain AS in ascending order, and sorting IP addresses under the same allocation time from small to large in decimal, and serial numbers of the sorted IP addresses are mapped to a third-dimension coordinate system; and 
 analyzing and mapping the IP address by locating a coordinate based on a Hilbert algorithm and the Z-axis mapping algorithm. 
 
     
     
       6. The apparatus according to  claim 5 , wherein
 the predetermined algorithm is a Hilbert mapping algorithm, and said mapping, based on the predetermined algorithm, the one-dimensional ASN to the two-dimensional coordinate space comprises: 
 performing dimension ascending mapping on the ASN by using the Hilbert mapping algorithm, and determining that two-dimensional coordinates of the two-dimensional cyberspace coordinate system collectively represent an AS attribute of cyberspace. 
 
     
     
       7. The apparatus according to  claim 5 , wherein said constructing the cyberspace map model based on the cyberspace coordinate system and the framework for the three-dimensional cyberspace coordinate system comprises:
 determining that a hierarchical structure of a cyberspace is divided into three layers: the AS, a network, and an IP; and 
 defining a sphere mode of cyberspace, wherein the AS is mapped to another three-dimensional space by adopting a force-directed algorithm and taking the AS as a node in the force-directed algorithm, the AS being denoted as a sphere in the other three-dimensional space, and the sphere having a size positively correlated to a number of IP addresses under the AS.